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Abstract. In wireless data networks, communication is particularly sus- 
ceptible to eavesdropping due to its broadcast nature. Security and pri- 
vacy systems have become critical for wireless providers and enterprise 
networks. This paper considers the problem of secret communication 
over the Gaussian broadcast channel, where a multi-antenna transmit- 
ter sends independent confidential messages to two users with perfect 
secrecy. That is, each user would like to obtain its own message reliably 
and confidentially. First, a computable Sato- type outer bound on the 
secrecy capacity region is provided for a multi-antenna broadcast chan- 
nel with confidential messages. Next, a dirty-paper secure coding scheme 
and its simplified version are described. For each case, the corresponding 
achievable rate region is derived under the perfect secrecy requirement. 
Finally, two numerical examples demonstrate that the Sato-type outer 
bound is consistent with the boundary of the simplified dirty-paper cod- 
ing secrecy rate region. 

Key words: secure communication, broadcast channels, multiple an- 
tennas 



1 Introduction 

The need for efficient, reliable, and secure data communication over wireless net- 
works has been rising rapidly for decades. Due to its broadcast nature, wireless 
communication is particularly susceptible to eavesdropping. The inherent prob- 
lematic nature of wireless networks exposes not only the risks and vulnerabilities 
that a malicious user can exploit and severely compromise the network but also 
multiplies information confidentiality concerns with respect to in-network ter- 
minals. Hence, security and privacy systems have become critical for wireless 
providers and enterprise networks. 

In this work, we consider multiple antenna secure broadcast in wireless net- 
works. This research is inspired by the seminal paper [1], in which Wyner intro- 
duced the so-called wiretap channel and proposed an information theoretic ap- 
proach to secure communication schemes. Under the assumption that the channel 
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Fig. 1. Multiple-antenna Gaussian broadcast channel with confidential message 

to the eavesdropper is a degraded version of that to the desired receiver, Wyner 
characterized the capacity-secrecy tradeoff for the discrete memoryless wiretap 
channel and showed that secure communication is possible without sharing a se- 
cret key. Later, the result was extended by Csiszar and Korner who determined 
the secrecy capacity for the non-degraded broadcast channel (BC) with a single 
confidential message set intended for one of the users [2]. 

In more general wireless network scenarios, secure communication may in- 
volve multiple users and multiple antennas. Motivated by wireless communica- 
tions, where transmitted signals are broadcast and can be received by all users 
within the communication range, a significant research effort has been invested 
in the study of the information-theoretic limits of secure communication in dif- 
ferent wireless network environments [3-10]. 

This issues motivate us to study the multi-antenna Gaussian broadcast chan- 
nel with confidential messages (MGBC-CM), in which independent confidential 
messages from a multi-antenna transmitter are to be communicated to two users. 
The corresponding broadcast communication model is shown in Fig. 1. Each user 
would like to obtain its own message reliably and confidentially. 

To give insight into this problem, we first consider a single antenna Gaussian 
broadcast channel (GBC). Note that this channel is degraded [11], which means 
that if a message can be successfully decoded by the inferior user, then the 
superior user is also ensured of decoding it. Hence, the secrecy rate of the inferior 
user is zero and this problem is reduced to the scalar Gaussian wiretap channel 
problem [12] whose secrecy capacity is now the maximum rate achievable by the 
superior user. This analysis gives rise to the question: can the transmitter, in fact, 
communicate with both users confidentially at nonzero rate under some other 
conditions? Roughly speaking, the answer is in the affirmative. In particular, the 
transmitter can communicate when equipped with sufficiently separated multiple 
antennas. 

We here have two goals motivated directly by questions arising in practice. 
The first is to determine the condition under which both users can obtain their 
own messages reliably and confidentially This is equivalent to evaluating the se- 
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crecy capacity region for the MGBC-CM. The second is to show how the trans- 
mitter should broadcast securely, which is equivalent to designing an achievable 
secure coding scheme. To this end, a computable Sato-type outer bound on the 
secrecy capacity region is developed for the MGBC-CM in Sec. 3. Next, a dirty- 
paper secure coding scheme and its simplified version are described. For each 
case, the corresponding achievable rate region is derived under perfect secrecy 
requirement in Sec. 4. Finally, two numerical examples demonstrate that the 
Sato-type outer bound is consistent with the boundary of the simplified dirty- 
paper coding (DPC) secrecy rate region in Sec. 5. 

2 System Model 

We consider the communication of confidential messages to two users over a 
Gaussian broadcast channel via t transmit-antennas. Each user is equipped with 
a single receive-antenna. The received signals at user 1 and user 2 are are modeled 

as 

V2,i = g H *i + z 2 ,i, i = l,...,n (1) 

where € C is the transmitted vector at time i, z\^ and Z2,i correspond to two 
independent, zero-mean, unit- variance, complex Gaussian noise sequences, and 
h, g e C* are channel attenuation vectors corresponding to user 1 and user 2, 
respectively. The channel input is constrained by 

n 

-]>>| 2 <A (2) 

i=l 

where A is the total transmit energy per channel use. We also assume that both 
the transmitter and receivers are aware of the attenuation vectors h and g. 

As shown in Fig. 1, the transmitter intends to send an independent confi- 
dential message Wk <E {1, . . . , Mk} = Wfc to the respective user k <G {1, 2} in n 
channel uses. To increase the randomness of transmitted messages, we consider a 
stochastic encoder at the transmitter. More explicitly, the encoder is specified by 
a matrix of conditional probability density /(x n |ioi, w 2 ), where x" = [x 1; . . . , x n ] 
and Wk € Wfe. In other words, /(x n |w l7 w 2 ) is the probability density associated 
with the conditional probability that the messages (101,102) are encoded as the 
channel input x™. 

The decoding function at user k is a mapping <pk ■ C" — > Wfe. The se- 
crecy levels with respect to the confidential messages W\ and W 2 are measured, 
respectively, at receivers 1 and 2 with respect to the normalized equivocations 

-H(W 2 \YJ l ,W 1 ) and -HiWAY? ,W 2 ). (3) 
n n 

An (Mi,M 2 ,n, P e ) code for the broadcast channel consists of the encoding 
function /, decoding functions <p\, <f) 2 , and the maximum error probability P e = 
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max{P 6i i, Pe,2}, where P e ^ is the error probability for user k given by 

P e , k = P[<f> k {Y^)^w k ]. (4) 

A rate pair (Pi, P2) is said to be achievable for the broadcast channel with 
confidential messages if, for any e > 0, there exists an (Mi, M 2 , n, P e ) code that 
satisfies P e < e, M k > 2 nRh , for k = 1, 2, and the perfect secrecy requirement 

ff(Wi) -PT(Wi|y 2 n ,W2) < ne and if(W 2 ) - H(W 2 \Y{ 1 , Wi) < ne. (5) 

The secrecy capacity region of Cbcc of the MGBC-CM is the closure of the 
set of all achievable rate pairs (Pi, P 2 ). 

3 Outer Bound on the Secrecy Capacity Region 
3.1 Sato- Type Outer Bound 

We first consider a Sato-type bound that can be applied to both discrete mem- 
oryless and Gaussian broadcast channels with confidential messages (BC-CM). 
Let V be the set of channels P Yi y 2 \x. that have the same marginal distributions 

as P Yi ,y 2 \x., i-e., 

p ?i|x(»il x ) = p (2/il x ) and p ? 2 |x(2/2|x) = P(y 2 |x) (6) 

for all y\, y 2 and x. Let lZo(P Yl y 2 ix' ^ x ) denote the union of all rate pairs 
(Pi, P 2 ) satisfying 

Pi <I(X;Yi\Y 2 ) and P 2 < /(X; Y 2 \Y{) (7) 
for given distributions Px and P^ p 2 | X - 

Theorem 1. T/ie secrecy capacity region Cbcc 0/ f/ie BC-CM satisfies 

CbccC f) ||JPo(P ?1 , ?2 | X ,Px)}. (8) 

Proof. See the Appendix. 

Remark 1. The outer bound (8) follows by letting the users decode the message 
in a cooperative manner, while evaluating the secrecy level in an individual man- 
ner. Hence, the eavesdropped signal is always a degraded version of the entire 
received signal. This permits the use of the wiretap channel result of [1]. 

Remark 2. Although Theorem 1 is based on a degraded argument, the outer 
bound (8) can be applied to general broadcast channels with confidential mes- 
sages. 
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3.2 Sato- Type Outer Bound for the Gaussian BC-CM 

For the Gaussian channel case, we can simplify the outer bound (8) using the 
following steps. First, the channel family V is the set of channels (1) where z\ 
and Z2 are replaced by arbitrarily correlated, zero-mean, unit- variance, Gaussian 
random variables zi and Z2 with covariance v. Furthermore, we consider a new 
coordinate transform as the setting of [10] and rewrite the broadcast channel 
model (1) as follows: 

yi = |h|si + zi 



where 



2/2 = a|g|si + H 2 |g|s 2 + z 2 . (9) 



g H h h H x , (Ihlg - a\g\h) H x. , , 

a = ^-f, 8l = and s 2 = Vl S ; ISI ' . 10 

|h||g| |h| v/i-M'lhllgl 



From now on, we define 



s = 



|h|[l,0] ff and g = |g|[a, V^Wf ■ (") 



The vector s can be interpreted as the projection of x onto the subspace spanned 
by h and g, or more precisely, the projection of x onto the 2 orthonormal bases 

h |h|g-a|g|h 
n = — and r 2 = . . (12) 

|h| yi^H^|h|| g | 

Since the projection operation cannot increase the length of a vector, the covari- 
ance matrix Ks lt s 2 satisfies the input constraint tr(Ks 1 ,s 2 ) < A. We also note 
that the Markov chain property X — ► (Si, S2) — » (Yi,Y 2 ) holds, and hence, 

I(X;Y 1 \Y 2 ) = I(S U S 2 ;Y 1 \Y 2 ) and /(X; %\Yi) = I(Si, S 2 ; Y 2 \Yi). (13) 

Following [12], it can be shown that Gaussian input distributions maximize IZo 
by applying the maximum-entropy theorem [11]. Hence, we restrict attention to 
a zero-mean Gaussian pair (Si, S 2 ) with the covariance matrix Ks lt s 2 - These 
facts are summarized in the following. 

For a multi-antenna Gaussian broadcast channel, the rate region IZo is a 
function of the noise covariance v and the input covariance matrix Ks lt s 2 i i- e -> 
1Zo{v, Ks lt s 2 ) is the union of all rate pairs (Ri, R 2 ) satisfying 

«' * "* (i - HCT^l) (14) 



and 



K Y Y 

R 2 < log 2 ^ =r- (15) 

" (l-H2)(l +h ^ SlA h) 
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where Ky Y is the covariance matrix of Y\ and Y 2 . This covariance matrix is 
given explicitly by 

K y u y 2 = V^W\h\ 2 \s\ 2 \K Sl ,s 2 I +h H K Su s 2 h + g H K SuS2 S 

-g H K SuS2 (vh)-(vh) H K SuS2 g + l-W\ 2 . (16) 

Theorem 2. For an MGBC-CM, the secrecy capacity region Cbcc satisfies 

CbccC p| I |J Ho{v, K Su s*)\ (17) 

where A is the set of all covariance matrices satisfying the input constraint 
tv{K Sl ,s 2 ) < A. 

Proof. Theorem 2 follows from Theorem 1 and the fact that the optimum input 
distribute is Gaussian. 

Remark 3. Theorem 2 describes a computable outer bound of the secrecy ca- 
pacity region for the MGBC-CM. The bound (17) provides a benchmark for 
evaluating the goodness of achievable coding schemes described in next section. 



4 Inner Bound and Achievable Coding Scheme 
4.1 Inner Bound for the BC-CM 

An inner bound for the BC-CM has been established in [13, Theorem 3]. Here 
we first review the result as follows. Let V\ and Vi be auxiliary random vari- 
ables. We define Q as the class of joint probability densities p(v\, x, yi, j/2) 
that factor as p(v\, «2)p(x|wi, V2)p{yi, 2/2|x). Let TZi(n) denote the union of all 
(i?i,i?2) satisfying 

0<Ri < HV^) - I(V i; Y 2 \V 2 ) - I(V i; V 2 ) (18) 

and 

Q<R2<I{V 2 -Y 2 )-I{V 2 -Y 1 \V 1 )-I{V l -V 2 ) (19) 
for a given joint probability density n e Q. 
Theorem 3. [13, Theorem 3] Any rate pair 

{Ri,R 2 ) ecoJ |J fti(7r)l (20) 
Kiren ) 

is achievable for the broadcast channel with confidential messages, where co{6>} 
denotes the convex hull of the set S. 
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The proof of Theorem 3 can be found in [13]. Here, we provide an alternative 
view on this result. The best known achievable rate for a general BC was found 
by Marton in [14]. For a given joint density p(vi,v 2 ,x), the Marton sum rate 
(without a common rate) is given by 

I(Vi;Yi) + I(V 2 ;Y 2 ) - I(Vi;V 2 ). 

On the other hand, the total (both intended and eavesdropped) information rate 
obtained by user 2 is bounded by J(Vi, V 2 ; Y 2 ). This implies that to satisfy the 
perfect secrecy requirement, the achievable secrecy rate of user 1 can be written 

as 

Ri < [I(Vi;Y!) + I(V 2 ;Y 2 ) - I(Vi; V 2 )} - I{V U V 2 ;Y 2 ) 
which leads to the bound in (18). 

Remark 4- We note that for a broadcast channel, we can employ joint encoding 
at the transmitter. However, to preserve confidentiality, both achievable rates in 
(18) and (19) include a penalty term J(Vi; V 2 ). Hence, compared with Marton's 
sum rate bound [14], here, we pay "double" to jointly encode at the transmitter. 



4.2 Dirty Paper Coding Scheme for the MGBC-CM 

The achievable strategy in Theorem 3 introduces a double-binning coding scheme 
that enables both joint encoding at the transmitter by using Slepian-Wolf bin- 
ning [15] and preserving confidentiality by using random binning. However, when 
the rate region (20) is used as a constructive technique, it not clear how to choose 
the auxiliary random variables V\ and V 2 to implement the double binning code- 
book, and hence, one has to "guess" the density of p(vi, v 2 , x). Here, we employ 
the DPC strategy to study the achievable secrecy rate region. 

For the MGBC-CM, we focus on the new coordinate channel model (9) and 

let 



x = s 1 r 1 + s 2 r 2 . 



(21) 



Hence, the vector s can be viewed as a precoded signal for x. We generate signal 
s by dirty paper encoding with Gaussian codebooks [16, 17] as follows. 
First, sperate the precoded signal s into two vectors so that 



Ul 



"1,1 




"2,1 






«1,2_ 




M2,2_ 



and Ui + u 2 = s. 



(22) 



Let Ui and U 2 denote random variables corresponding to Ui and u 2 , respectively. 
We choose Ui and U 2 as well as auxiliary random variables Vi and V 2 as follows: 



Ui-CAf&Ku,), 

U 2 ~ CAf(0, K U2 ), independent of U\ 
Vi=Ui and V 2 = U 2 +hg H Ui 



(23) 



8 



Ruoheng Liu and H. Vincent Poor 



where Kjj 1 and Kjj 2 are covariance matrices of U\ and U 2 , respectively, and 

b = X [/2 g(l + g^ [/2 g)- 1 . (24) 

Based on the conditions (23) and Theorem 3, we obtain a DPC rate region for 
the MGBC-CM as follows. 

Theorem 4. [DPC region] Let 7^[ DPC ' (K Ul , K U2 ) denote the union of all (Ri, R 2 ) 
satisfying 

0< Rl < log 2 l + ^ 1+ ^ 2 )h _ l±pK^+K^ 
" 2 l + h H K U2 h 82 l + g H K U2 g v ' 

and 

0<fl 2 <log 2 \ + f H K J 2 l - (26) 
l + h H K U2 h 

Then, any rate pair 

(Ri,R 2 ) e co J |J 7^(^,1^)1 (27) 

is achievable for the multi-antenna Gaussian broadcast channel with confidential 
messages. 

Proof. See the Appendix. 

Remark 5. In general, the set of achievable secrecy rates may be increased by 
considering another new coordinate channel with the bases 

r' 1 = T §L and r 2 = (28) 
1 |g| 2 v^RF|h|| g | V ; 

and reversing the roles of user 1 and user 2. 

4.3 Simplified Dirty Paper Coding Scheme 

The DPC secrecy rate region (27) requires optimization of the covariance ma- 
trices Ku x and K\j 2 . Here, we consider a simplified DPC scheme as follows. Let 

A id = E[\U id \% for i = 1,2 and j = 1, 2 (29) 

where Uij denotes the random variable corresponding to mj. The channel input 
power constraint implies that 

A hl + A h2 + A 2A + A 2 , 2 < A. (30) 
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In particular, we choose the normalized correlation coefficients as 

a E[Ui,iUl 2 } a* A E[U 2A Ul 2 ] a* 

Pi = — 7^=^= = ~TT and P 2 = 



V A 2,lA 2 



(31) 



Now, we describe a simplified DPC secrecy rate region based on the setting 
(29)-(31). Let 



fi(A ltl ,A lt 2,A2,i,A 2 ,2) = 

[l + |h| 2 (Ai il + i4 2 ,i)]/ 2 (A 2i i,A 2i2 ) 



l + III 2 \Pi7-VF^ +III 2 VPA^ + ^(l-/3)A 2t2 



(32) 



and 



f2(A 2A ,A 2i2 ) 



l + |g| ; 



n 2 



1 + |h|A 2i i 



(33) 



where (3 = \a\ 2 . 

Lemma 1. [simplified DPC region] Let 1Z[ ^1,2, ^2,1, ^2,2) denote 

the union of all (R\,R 2 ) satisfying 



0<Ri< \og 2 h{Ai,i,A lt2 ,A 2 ^,A 2t2 ) 



< i? 2 < log 2 / 2 (A 2i i,A 2i2 ). 



(34) 



(35) 



Then, any rate pair 



{R 1 ,R 2 )Gco{ \J TZ I {A 1A ,A 1 ^,A 2A ,A 2i2 )} (36) 

k A 1>1 +A 1 , 2 +A 2a +A 2 , 2 <A 

is achievable for the multi-antenna Gaussian broadcast channel with confidential 
messages. 

Remark 6. To calculate the simplified DPC secrecy rate region, we need only to 
allocate the total power into the precoded signals 1*1,1, 1*1,2, u 2 .i and w 2 ,2- This 
significantly reduces the computational complexity. 



4.4 A Special Case 

A special case of the MGBC-CM model is the Gaussian MISO wiretap chan- 
nel, where the transmitter sends confidential information to only one user (e.g., 
user 2) and treats another user (e.g., user 1) as an eavesdropper. In this case, we 
set Ku 1 — 0, so that Ks 1 ,s 2 — Ku 2 - Now, applying Theorems 2 and 4, we obtain 
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the following upper and lower bounds on the secrecy capacity of the Gaussian 
MISO wiretap channel: 

K ? y 

Cmiso < min max log 2 '— — (37) 

0<M<ltr(K Sl , S2 )<A (1_ |i/|2)(l + h^ SliS2 h) 

and 

Cmiso> max log 2 (l + g H K Sl .s 2 g)(l + h H K Su s 2 h)-\ (38) 

tr(Jf Sl ,s 2 )<A 

It can been verified that the two bounds meet to describe the secrecy capacity 
of the MISO wiretap channel, which is consistent with the result in [18]. In 
other words, the corner points of the Sato-type outer bound (17) and the DPC 
achievable rate region (27) are identical. 



5 Numerical Examples 

In this section, we study two numerical examples to illustrates the secrecy rate 
region of the MGBC-CM. For simplicity we assume that the GBC has real input 
and output alphabets and a is real too. Under this setting, all calculated secrecy 
rate values are divided by 2. 

In the first example, we consider the following GBC with a large a, 

yi = si + zi 

y 2 = 2(0.9si + Vl - 0.81s 2 ) + z 2 (39) 

i.e., |h| = 1, |g| = 2 and a = 0.9. The total power constraint is set to A = 10. 
Fig. 2 depicts inner and outer bounds on the secrecy capacity for the example 
MGBC-CM described in (39). We compare the Sato- type outer bound (indicated 
by the dashed line) with the secrecy rate regions achieved by the simplified 
DPC coding scheme (indicated by the solid line) and the time-sharing scheme 
(indicated by the dash-dot line). Surprisingly, we observe that not only the corner 
points but also the boundary of the simplified DPC secrecy rate region (36) is 
identical with the Sato-type outer bound (17). Furthermore, Fig. 2 demonstrates 
that the time-sharing scheme is strictly suboptimal for providing the secrecy 
capacity region. 

In the second example, wc consider a broadcast channel with a small a 

Ui = si + zi 

y 2 = 2(0.2si + VI - 0.04s 2 ) + z 2 (40) 

i.e., |h| = 1, |g| = 2 and a — 0.2. The total power A = 10. Fig. 3 illustrates that, 
again, the boundary of the simplified DPC secrecy rate region (36) is consistent 
with the Sato- type outer bound (17). 
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6 Conclusion 

In this paper, we have investigated outer and inner bounds on the secrecy capac- 
ity region of a generally non-degraded Gaussian broadcast channel with confiden- 
tial messages for two users, where the transmitter has t antennas and each user 
has one antenna. For this model, we have introduced a computable Sato-type 
outer bound and proposed a dirty-paper secure coding scheme. Using numerical 
examples, we have illustrated that the boundary of the simplified DPC secrecy 
rate region is consistent with the Sato-type outer bound. 

Based on this observation, we conjecture that the dirty-paper secure coding 
strategy achieves the secrecy capacity region of the MGBC-CM. 



Appendix 

Proof. (Theorem 1) Here we prove Theorem 1 and derive the outer bound for 
R\. The outer bound for i?2 follows by symmetry. 
The secrecy requirement (5) implies that 

nR x = H{Wi) < H(W 1 \Y™,W 2 ) +ne. (41) 

On the other hand, Fano's inequality and P e < e imply that 

H{Wi\Y?) < elog(Mi - 1) + h(e) = n5x. (42) 
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0.5 1 1.5 2 



R 1 

Fig. 3. Comparison of the Sato-type outer bound and secrecy rate regions achieved by 
time-sharing and simplified DPC schemes for the example MGBC-CM in (40) 



where h(x) is the binary entropy function. Now, we can bound (41) as follows 



nR x < H(Wi\Y?) +ne (43) 

< H{Wi\Y?) - ff(Wi|yT) + n(fr + e) (44) 

< H{Wi\Y£) - H{Wx\Y?, Y 2 n ) + n(8 1 + e) (45) 
= /(^i;F 1 "|y 2 n )+n(5 1 + e ) (46) 
<IQL n ;Y?\Y?)+n{6i + e) (47) 

n 

<Y l I ( X i> Y u\ Y %i)+n(S 1 + e). (48) 

i=l 



Note that the decoding error probability and the equivocation rate at each 
user depend only on the marginal probability densities P(yi|x) and P(j/2|x). 
Hence, one can replace Y\ and F 2 by Y\ and Y%. Therefore, we have the desired 
result. 

Proof. (Theorem 4) We first check the power constraint. Since U\ and U2 are 
independent and 

s = [si,s 2 ] T = Ui + u 2 , 
the covariance matrices Kjj 1 and Kjj 2 satisfy 

tr(K Vl +K U2 )= tr(K Sl , S2 ) < A. (49) 
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Following from [19, Theorem 1] and using the setting in (23), we can imme- 
diately obtain the well-known successive encoding result: 

m <r l) -* t . l±pSg±%& (50, 
1 + h H K U2 h 

and 

I(V 2 ;Y 2 ) - I(Vv,V 2 ) = log 2 (l + g H K U2 g). (51) 

Since V\ = U\ is independent of U 2 and V 2 = U 2 + hg H U\, we have 

I(V 2 ;Y 1 \V 1 )=I(U 2 +hg H U 1 ; Y^Ui) 

= I{U 2 ;Y 1 \U 1 ) (52) 
= log 2 (l + h^ 2 h). (53) 

Moreover, we note that 

I(Vv, Y 2 \V 2 ) + I(Vv,V 2 ) = I(Vt, V 2 ;Y 2 )- [I(V 2 ;Y 2 ) - I(Vf, V 2 )] 

1 + g w A[/ 2 g 

Substituting (50)-(54) into (18) and (19), we have the desired result. 
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